AskOverflow.Dev

AskOverflow.Dev Logo AskOverflow.Dev Logo

AskOverflow.Dev Navigation

  • 主页
  • 系统&网络
  • Ubuntu
  • Unix
  • DBA
  • Computer
  • Coding
  • LangChain

Mobile menu

Close
  • 主页
  • 系统&网络
    • 最新
    • 热门
    • 标签
  • Ubuntu
    • 最新
    • 热门
    • 标签
  • Unix
    • 最新
    • 标签
  • DBA
    • 最新
    • 标签
  • Computer
    • 最新
    • 标签
  • Coding
    • 最新
    • 标签
主页 / server / 问题 / 960268
Accepted
fadedbee
fadedbee
Asked: 2019-03-28 06:33:20 +0800 CST2019-03-28 06:33:20 +0800 CST 2019-03-28 06:33:20 +0800 CST

如何成功将公钥 94532124541922FB 导入 GPG?

  • 772

我想我需要在我的钥匙圈中有钥匙 94532124541922FB ,因为 multistrap 正在报告:

W: GPG error: http://packages.roundr.devuan.org/merged ascii InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 94532124541922FB
W: The repository 'http://auto.mirror.devuan.org/merged ascii InRelease' is not signed.

我尝试使用以下方法导入密钥:

user@host:~/multistrap$ sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 94532124541922FB
Executing: /tmp/apt-key-gpghome.wsOOsj4iqi/gpg.1.sh --keyserver keyserver.ubuntu.com --recv-keys 94532124541922FB
key 94532124541922FB:
1 signature not checked due to a missing key
gpg: key 94532124541922FB: "Devuan Repository (Primary Devuan signing key) <[email protected]>" 1 new signature
gpg: Total number processed: 1
gpg:         new signatures: 1

我不确定这是否成功,所以我尝试了:

user@host:~/multistrap$ gpg --list-keys
/home/user/.gnupg/pubring.kbx
--------------------------------
pub   rsa3072 2019-03-25 [SC] [expires: 2021-03-24]
      579B175CD95705FB9A6C3D271587404115319AFF
uid           [ultimate] User <[email protected]>
sub   rsa3072 2019-03-25 [E] [expires: 2021-03-24]

这让我觉得它失败了。

如何获得密钥 94532124541922FB?


更新:我发现 apt-key 具有与 GPG 不同的密钥环,并且 GPG 具有不同的密钥环,具体取决于您使用的sudo.

关键在那里,有apt-key:

user@host:~/multistrap$ sudo apt-key adv --list-keys
Executing: /tmp/apt-key-gpghome.12skPKfRJz/gpg.1.sh --list-keys
/tmp/apt-key-gpghome.12skPKfRJz/pubring.gpg
-------------------------------------------
...
pub   rsa2048 2014-12-02 [SC]
      72E3CB773315DFA2E464743D94532124541922FB
uid           [ unknown] Devuan Repository (Primary Devuan signing key) <[email protected]>
sub   rsa2048 2014-12-02 [E]
sub   rsa4096 2016-04-26 [S]

pub   rsa4096 2016-10-06 [SC]
      CF1921B2D91C6435848E810099C46A90B1FB3B59
uid           [ unknown] Devuan ISO Toaster (Devuan GNU+Linux) <[email protected]>
sub   rsa4096 2016-10-06 [E]

pub   rsa4096 2017-09-04 [SC] [expires: 2022-09-03]
      E032601B7CA10BC3EA53FA81BB23C00C61FC752C
uid           [ unknown] Devuan Repository (Amprolla3 on Nemesis) <[email protected]>
sub   rsa4096 2017-09-04 [E] [expires: 2022-09-03]

但仍然多带抱怨:

user@host:~/multistrap$ sudo multistrap -a armhf -d /multistrap-devuan-ascii -f simple-config
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
    LANGUAGE = (unset),
    LC_ALL = (unset),
    LANG = "en_GB.UTF-8"
    are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
multistrap 2.2.9 using simple-config
multistrap 2.2.9 using simple-config
Defaulting architecture to native: armhf
multistrap building armhf multistrap on 'armhf'
I: Downloading debian-archive-keyring 
Get:1 http://packages.roundr.devuan.org/merged ascii/main armhf debian-archive-keyring all 2017.5 [56.4 kB]
Fetched 56.4 kB in 0s (67.5 kB/s)           
Getting package lists: APT_CONFIG=/tmp/multistrap.QTx1QB apt-get  -o Apt::Architecture=armhf -o Dir::Etc::TrustedParts=/multistrap-devuan-ascii/etc/apt/trusted.gpg.d -o Dir::Etc::Trusted=/multistrap-devuan-ascii/etc/apt/trusted.gpg -o Apt::Get::Download-Only=true -o Apt::Install-Recommends=false -o Dir=/multistrap-devuan-ascii/ -o Dir::Etc=/multistrap-devuan-ascii/etc/apt/ -o Dir::Etc::Parts=/multistrap-devuan-ascii/etc/apt/apt.conf.d/ -o Dir::Etc::PreferencesParts=/multistrap-devuan-ascii/etc/apt/preferences.d/ -o APT::Default-Release='*' -o Dir::State=/multistrap-devuan-ascii/var/lib/apt/ -o Dir::State::Status=/multistrap-devuan-ascii/var/lib/dpkg/status -o Dir::Cache=/multistrap-devuan-ascii/var/cache/apt/ update
Get:1 http://packages.roundr.devuan.org/merged ascii InRelease [21.9 kB]
Ign:1 http://packages.roundr.devuan.org/merged ascii InRelease
Fetched 21.9 kB in 0s (34.5 kB/s)
Reading package lists... Done
W: GPG error: http://packages.roundr.devuan.org/merged ascii InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 94532124541922FB
W: The repository 'http://auto.mirror.devuan.org/merged ascii InRelease' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
gpg
  • 1 1 个回答
  • 1285 Views

1 个回答

  • Voted
  1. Best Answer
    fadedbee
    2019-03-28T08:26:31+08:002019-03-28T08:26:31+08:00

    问题是 multistrap 只信任/multistrap-devuan-ascii/etc/apt/trusted.gpg.d目标目录中的密钥。

    当多重打包 Debian 时,这个目录充满了从debian-archive-keyring包中提取的文件。

    此包在 simple-config 中指定为密钥环:

    [General]
    unpack=true
    bootstrap=Debian
    aptsources=Debian
    
    [Debian]
    packages=
    source=http://ftp.uk.debian.org/debian
    keyring=debian-archive-keyring
    suite=lenny
    

    当我安装 Devuan(一个无系统的 Debian 分支)时,我simple-config看起来像:

    [General]
    unpack=true
    bootstrap=Devuan
    aptsources=Devuan
    
    [Devuan]
    packages=
    source=http://auto.mirror.devuan.org/merged
    keyring=
    suite=ascii
    

    Devuan 中确实存在该debian-archive-keyring软件包,但只有 Debian 密钥,没有丢失的 Devuan 密钥。没有devuan-archive-keyring。

    所以看起来我需要制作一个devuan-archive-keyring包含 Devuan 公钥的包。

    (我已经确认这会起作用,方法是在失败的 multistrap 运行之后放置。repository-devuan-org.gpg在/multistrap-devuan-ascii/etc/apt/trusted.gpg.d/第二次调用 multistrap 然后运行没有错误。)


    后续问题:Debian debian-archive-keyring 软件包的 Devuan 等价物是什么?

    • 3

相关问题

  • gpg中制作密钥对时随机数的生成方法

  • GPG/PGP 签名和加密 - 一个学术安全问题

  • 为什么 apt-get update 告诉我运行 apt-get update?

  • 输出/管道 ntbackup 直接到 GPG

  • 一般 GnuPG 技巧

Sidebar

Stats

  • 问题 205573
  • 回答 270741
  • 最佳答案 135370
  • 用户 68524
  • 热门
  • 回答
  • Marko Smith

    新安装后 postgres 的默认超级用户用户名/密码是什么?

    • 5 个回答
  • Marko Smith

    SFTP 使用什么端口?

    • 6 个回答
  • Marko Smith

    命令行列出 Windows Active Directory 组中的用户?

    • 9 个回答
  • Marko Smith

    什么是 Pem 文件,它与其他 OpenSSL 生成的密钥文件格式有何不同?

    • 3 个回答
  • Marko Smith

    如何确定bash变量是否为空?

    • 15 个回答
  • Martin Hope
    Tom Feiner 如何按大小对 du -h 输出进行排序 2009-02-26 05:42:42 +0800 CST
  • Martin Hope
    Noah Goodrich 什么是 Pem 文件,它与其他 OpenSSL 生成的密钥文件格式有何不同? 2009-05-19 18:24:42 +0800 CST
  • Martin Hope
    Brent 如何确定bash变量是否为空? 2009-05-13 09:54:48 +0800 CST
  • Martin Hope
    cletus 您如何找到在 Windows 中打开文件的进程? 2009-05-01 16:47:16 +0800 CST

热门标签

linux nginx windows networking ubuntu domain-name-system amazon-web-services active-directory apache-2.4 ssh

Explore

  • 主页
  • 问题
    • 最新
    • 热门
  • 标签
  • 帮助

Footer

AskOverflow.Dev

关于我们

  • 关于我们
  • 联系我们

Legal Stuff

  • Privacy Policy

Language

  • Pt
  • Server
  • Unix

© 2023 AskOverflow.DEV All Rights Reserve